Mike Marciniszyn b931b606ea IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields ...

commit d39bf40e55 upstream.

Overflowing either addrlimit or bytes_togo can allow userspace to trigger
a buffer overflow of kernel memory. Check for overflows in all the places
doing math on user controlled buffers.

Fixes: f931551baf ("IB/qib: Add new qib driver for QLogic PCIe InfiniBand adapters")
Link: https://lore.kernel.org/r/20211012175519.7298.77738.stgit@awfm-01.cornelisnetworks.com
Reported-by: Ilja Van Sprundel <ivansprundel@ioactive.com>
Reviewed-by: Dennis Dalessandro <dennis.dalessandro@cornelisnetworks.com>
Signed-off-by: Mike Marciniszyn <mike.marciniszyn@cornelisnetworks.com>
Signed-off-by: Dennis Dalessandro <dennis.dalessandro@cornelisnetworks.com>
Signed-off-by: Jason Gunthorpe <jgg@nvidia.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2023-05-16 12:02:29 +09:00

..

core

RDMA/cma: Fix rdma_resolve_route() memory leak

2023-05-16 11:25:44 +09:00

hw

IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields

2023-05-16 12:02:29 +09:00

sw

RDMA/rxe: Don't overwrite errno from ib_umem_get()

2023-05-16 11:25:38 +09:00

ulp

scsi: Revert "RDMA/isert: Fix a recently introduced regression related to logout"

2023-05-15 17:00:45 +09:00

Kconfig

RDMA/ucm: Mark UCM interface as BROKEN

2018-07-17 11:37:54 +02:00

Makefile

IB/rdmavt: Create module framework and handle driver registration

2016-03-10 20:37:04 -05:00